@raishin/vanguard-frontier-agentic 3.9.0 → 3.11.0

package/catalog/install-roles.json

@@ -814,6 +814,172 @@
         "terraform-module-contract"
       ]
     },
+    "databricks-analytics-engineer": {
+      "label": "Databricks Analytics Engineer",
+      "description": "Deliver and review governed analytics on Databricks: SQL warehouse performance and data layout for reads, AI/BI Dashboards and Genie agents grounded in metric views, data quality and freshness evidence, and the pipelines producing the serving tables. Static review only.",
+      "agents": [
+        "databricks-maestro-agent",
+        "databricks-sql-performance-agent",
+        "databricks-ai-bi-genie-agent",
+        "databricks-data-quality-observability-agent",
+        "databricks-lakeflow-pipeline-engineering-agent"
+      ],
+      "skills": [
+        "databricks-maestro",
+        "databricks-sql-performance",
+        "databricks-ai-bi-genie",
+        "databricks-data-quality-observability",
+        "databricks-lakeflow-pipeline-engineering"
+      ]
+    },
+    "databricks-data-engineer": {
+      "label": "Databricks Data Engineer",
+      "description": "Build and review Databricks data engineering: Lakeflow Spark Declarative Pipelines and Lakeflow Jobs, Delta table layout and ingestion, Structured Streaming correctness and recovery, pipeline expectations and monitoring, and the query performance of what the pipelines produce. Static review only.",
+      "agents": [
+        "databricks-maestro-agent",
+        "databricks-lakeflow-pipeline-engineering-agent",
+        "databricks-streaming-reliability-agent",
+        "databricks-data-quality-observability-agent",
+        "databricks-sql-performance-agent"
+      ],
+      "skills": [
+        "databricks-maestro",
+        "databricks-lakeflow-pipeline-engineering",
+        "databricks-streaming-reliability",
+        "databricks-data-quality-observability",
+        "databricks-sql-performance"
+      ]
+    },
+    "databricks-finops-engineer": {
+      "label": "Databricks FinOps Engineer",
+      "description": "Attribute and control Databricks spend: billing system-table evidence and correct price joins, tag attribution coverage and its documented gaps, DBU uptime semantics, budgets and compute policies, the query and workload tuning that reduces cost, and whether the spend has a measurable business outcome. Static review only.",
+      "agents": [
+        "databricks-maestro-agent",
+        "databricks-finops-cost-agent",
+        "databricks-sql-performance-agent",
+        "databricks-platform-reliability-agent",
+        "databricks-value-realization-agent"
+      ],
+      "skills": [
+        "databricks-maestro",
+        "databricks-finops-cost",
+        "databricks-sql-performance",
+        "databricks-platform-reliability",
+        "databricks-value-realization"
+      ]
+    },
+    "databricks-genai-engineer": {
+      "label": "Databricks GenAI Engineer",
+      "description": "Build and review generative AI on Databricks: Mosaic AI Agent Framework authoring, retrieval on Databricks AI Search, Unity Catalog functions and MCP tools, Unity AI Gateway policy, MLflow Tracing and GenAI evaluation, model serving lifecycle, and natural-language BI over governed data. Static review only.",
+      "agents": [
+        "databricks-maestro-agent",
+        "databricks-genai-agent-engineering-agent",
+        "databricks-genai-evaluation-observability-agent",
+        "databricks-mlops-agent",
+        "databricks-ai-bi-genie-agent"
+      ],
+      "skills": [
+        "databricks-maestro",
+        "databricks-genai-agent-engineering",
+        "databricks-genai-evaluation-observability",
+        "databricks-mlops",
+        "databricks-ai-bi-genie"
+      ]
+    },
+    "databricks-governance-security-engineer": {
+      "label": "Databricks Governance and Security Engineer",
+      "description": "Govern and secure Databricks: Unity Catalog namespace and privilege design, identity federation and admin separation, network and secret boundaries, row filters, column masks, classification, sharing egress, residency, and the platform topology those controls sit on. Static review only — never executes a GRANT.",
+      "agents": [
+        "databricks-maestro-agent",
+        "databricks-unity-catalog-governance-agent",
+        "databricks-identity-network-security-agent",
+        "databricks-data-protection-privacy-agent",
+        "databricks-platform-architecture-agent"
+      ],
+      "skills": [
+        "databricks-maestro",
+        "databricks-unity-catalog-governance",
+        "databricks-identity-network-security",
+        "databricks-data-protection-privacy",
+        "databricks-platform-architecture"
+      ]
+    },
+    "databricks-ml-engineer": {
+      "label": "Databricks ML Engineer",
+      "description": "Build and review machine learning on Databricks: MLflow 3 with models in Unity Catalog, alias-based promotion, feature engineering and point-in-time correctness, Mosaic AI Model Serving, evaluation and tracing, bundle-driven promotion, and the data quality the models depend on. Static review only.",
+      "agents": [
+        "databricks-maestro-agent",
+        "databricks-mlops-agent",
+        "databricks-genai-evaluation-observability-agent",
+        "databricks-developer-platform-agent",
+        "databricks-data-quality-observability-agent"
+      ],
+      "skills": [
+        "databricks-maestro",
+        "databricks-mlops",
+        "databricks-genai-evaluation-observability",
+        "databricks-developer-platform",
+        "databricks-data-quality-observability"
+      ]
+    },
+    "databricks-platform-engineer": {
+      "label": "Databricks Platform Engineer",
+      "description": "Design and review the cloud-neutral Databricks platform: account and workspace topology, identity and network boundary, Declarative Automation Bundles and CI/CD, operational reliability from system tables, and platform cost control. Static review only — never mutates a workspace.",
+      "agents": [
+        "databricks-maestro-agent",
+        "databricks-platform-architecture-agent",
+        "databricks-identity-network-security-agent",
+        "databricks-developer-platform-agent",
+        "databricks-platform-reliability-agent",
+        "databricks-finops-cost-agent"
+      ],
+      "skills": [
+        "databricks-maestro",
+        "databricks-platform-architecture",
+        "databricks-identity-network-security",
+        "databricks-developer-platform",
+        "databricks-platform-reliability",
+        "databricks-finops-cost"
+      ]
+    },
+    "databricks-solution-architect": {
+      "label": "Databricks Solution Architect",
+      "description": "Shape a Databricks solution end to end: platform topology and segmentation, Unity Catalog governance model, pipeline and medallion design, the ML and model lifecycle, and a value case with a real baseline, named owner, attribution limits, and kill condition. Static review only.",
+      "agents": [
+        "databricks-maestro-agent",
+        "databricks-platform-architecture-agent",
+        "databricks-unity-catalog-governance-agent",
+        "databricks-lakeflow-pipeline-engineering-agent",
+        "databricks-mlops-agent",
+        "databricks-value-realization-agent"
+      ],
+      "skills": [
+        "databricks-maestro",
+        "databricks-platform-architecture",
+        "databricks-unity-catalog-governance",
+        "databricks-lakeflow-pipeline-engineering",
+        "databricks-mlops",
+        "databricks-value-realization"
+      ]
+    },
+    "databricks-sre": {
+      "label": "Databricks Site Reliability Engineer",
+      "description": "Operate Databricks reliably: system-table operational evidence, job and pipeline run reliability, cluster policies and compute guardrails, quota headroom, managed disaster recovery and failover discipline, streaming recovery semantics, deployment safety, and warehouse performance under load. Static review only.",
+      "agents": [
+        "databricks-maestro-agent",
+        "databricks-platform-reliability-agent",
+        "databricks-streaming-reliability-agent",
+        "databricks-developer-platform-agent",
+        "databricks-sql-performance-agent"
+      ],
+      "skills": [
+        "databricks-maestro",
+        "databricks-platform-reliability",
+        "databricks-streaming-reliability",
+        "databricks-developer-platform",
+        "databricks-sql-performance"
+      ]
+    },
     "dotnet-application-review-engineer": {
       "label": ".NET Application Review Engineer",
       "description": "Static review of .NET applications: C# and runtime correctness, ASP.NET Core API architecture, authentication and authorization, EF Core data access, test quality, CI and NuGet supply-chain integrity, performance and Native AOT readiness, in-application OpenTelemetry wiring, and .NET Aspire cloud-native posture. A dotnet-maestro router plus nine static-review specialists; every agent reads source and sanitized configuration only and never builds, runs, migrates, or contacts a live system.",
@@ -1529,7 +1695,7 @@
     },
     "azure-snowflake-platform-engineer": {
       "label": "Azure Snowflake Platform Engineer",
-      "description": "Static-review governance and engineering for Snowflake on Azure: RBAC least privilege (ACCOUNTADMIN restriction, SECURITYADMIN/SYSADMIN separation of duties, network policies, Entra OAuth/SSO/SCIM) and data-platform engineering (warehouses, Azure Private Link/storage integration, masking/row-access/tagging governance). Advisory only; production role/grant/policy/warehouse changes are live-guard gated and require explicit human approval.",
+      "description": "Static-review governance and engineering for Snowflake on Azure: RBAC least privilege (ACCOUNTADMIN restriction, SECURITYADMIN/SYSADMIN separation of duties, network policies, Entra OAuth/SSO/SCIM) and data-platform engineering (warehouses, Azure Private Link/storage integration, masking/row-access/tagging governance). Advisory only, with one approval-gated live guard covering exactly one mutation: a single GRANT or REVOKE. Policy, warehouse, data-protection, pipeline, and failover changes are NOT gated by this role — it installs no guard that owns them. Superseded by the cloud-neutral snowflake roles, whose guards cover those mutations; these Azure-scoped assets are `lifecycle: deprecated` and retained for continuity.",
       "agents": [
         "snowflake-rbac-access-governance-at-azure-agent",
         "snowflake-data-platform-engineering-at-azure-agent",
@@ -2200,6 +2366,138 @@
         "typescript-runtime-boundary-contract",
         "typescript-business-critical-automation-governance"
       ]
+    },
+    "snowflake-platform-architect": {
+      "label": "Snowflake Platform Architect",
+      "description": "End-to-end Snowflake architecture and operability: account and organization topology, workload placement and isolation, edition/cloud/region constraints, interoperability and catalog choice, the running estate's parameters, ownership and drift, and migration or coexistence with an existing data platform. Static review only — proposes structure and operating procedure, never applies a change to an account.",
+      "agents": [
+        "snowflake-maestro-agent",
+        "snowflake-solution-architect-agent",
+        "snowflake-platform-administrator-agent",
+        "snowflake-migration-modernization-agent",
+        "snowflake-business-value-adoption-strategist-agent"
+      ],
+      "skills": [
+        "snowflake-maestro",
+        "snowflake-solution-architect",
+        "snowflake-platform-administrator",
+        "snowflake-migration-modernization",
+        "snowflake-business-value-adoption-strategist"
+      ]
+    },
+    "snowflake-security-governance-engineer": {
+      "label": "Snowflake Security and Governance Engineer",
+      "description": "Snowflake identity, reachability, data protection, and audit evidence: effective access across role hierarchy, ownership and future grants; authentication policies, MFA, federation, SERVICE and SERVICE_AGENT identities; network policies and private connectivity with lockout prevention; masking, row-access, classification and lineage; and independent evidence that a control operated across an audit period. Static review plus three approval-gated live guards, each owning exactly one mutation: a single grant or revoke, a single auth or network policy change, and a single masking or row-access policy attach, detach, or replace.",
+      "agents": [
+        "snowflake-maestro-agent",
+        "snowflake-identity-access-security-agent",
+        "snowflake-network-private-connectivity-agent",
+        "snowflake-governance-privacy-agent",
+        "snowflake-compliance-evidence-auditor-agent",
+        "snowflake-live-rbac-grant-guard-agent",
+        "snowflake-live-auth-network-policy-guard-agent",
+        "snowflake-live-data-protection-policy-guard-agent"
+      ],
+      "skills": [
+        "snowflake-maestro",
+        "snowflake-identity-access-security",
+        "snowflake-network-private-connectivity",
+        "snowflake-governance-privacy",
+        "snowflake-compliance-evidence-auditor",
+        "snowflake-live-rbac-grant-guard",
+        "snowflake-live-auth-network-policy-guard",
+        "snowflake-live-data-protection-policy-guard"
+      ]
+    },
+    "snowflake-finops-performance-engineer": {
+      "label": "Snowflake FinOps and Performance Engineer",
+      "description": "Snowflake unit economics and query performance as one accountable pair: warehouse, serverless, AI and storage spend, budgets versus resource monitors, query and tag attribution, idle compute and anomaly investigation, alongside Query Profile diagnosis, pruning, spilling, queueing, clustering and acceleration economics. Static review plus one approval-gated live guard for a single warehouse or cost-governance change.",
+      "agents": [
+        "snowflake-maestro-agent",
+        "snowflake-finops-cost-governor-agent",
+        "snowflake-query-performance-engineer-agent",
+        "snowflake-business-value-adoption-strategist-agent",
+        "snowflake-live-warehouse-cost-change-guard-agent"
+      ],
+      "skills": [
+        "snowflake-maestro",
+        "snowflake-finops-cost-governor",
+        "snowflake-query-performance-engineer",
+        "snowflake-business-value-adoption-strategist",
+        "snowflake-live-warehouse-cost-change-guard"
+      ]
+    },
+    "snowflake-data-engineer": {
+      "label": "Snowflake Data Engineer",
+      "description": "Snowflake pipeline and ingestion correctness rather than job completion: batch and ELT loading, Streams, Tasks, Dynamic Tables and achieved target lag, Snowpark transformations, idempotency and reconciliation, plus Snowpipe and Snowpipe Streaming architecture, channel and offset semantics, connector migration, and silent-loss detection. Static review plus one approval-gated live guard for a single pipeline or ingestion change.",
+      "agents": [
+        "snowflake-maestro-agent",
+        "snowflake-data-engineering-pipelines-agent",
+        "snowflake-streaming-ingestion-reliability-agent",
+        "snowflake-analytics-semantic-data-product-agent",
+        "snowflake-live-pipeline-streaming-change-guard-agent"
+      ],
+      "skills": [
+        "snowflake-maestro",
+        "snowflake-data-engineering-pipelines",
+        "snowflake-streaming-ingestion-reliability",
+        "snowflake-analytics-semantic-data-product",
+        "snowflake-live-pipeline-streaming-change-guard"
+      ]
+    },
+    "snowflake-ai-analytics-engineer": {
+      "label": "Snowflake AI and Analytics Engineer",
+      "description": "Snowflake analytical semantics, ML lifecycle governance, and the AI trust boundary: metric and KPI contracts, semantic views and the Cortex Analyst boundary, Snowpark ML reproducibility and drift, and the security review of Cortex Agents, tools, MCP connectors, retrieval corpora, prompt injection, exfiltration paths and AI cost per successful task. Static review only.",
+      "agents": [
+        "snowflake-maestro-agent",
+        "snowflake-analytics-semantic-data-product-agent",
+        "snowflake-data-science-ml-agent",
+        "snowflake-cortex-ai-agent-security-governor-agent",
+        "snowflake-governance-privacy-agent"
+      ],
+      "skills": [
+        "snowflake-maestro",
+        "snowflake-analytics-semantic-data-product",
+        "snowflake-data-science-ml",
+        "snowflake-cortex-ai-agent-security-governor",
+        "snowflake-governance-privacy"
+      ]
+    },
+    "snowflake-delivery-resilience-engineer": {
+      "label": "Snowflake Delivery and Resilience Engineer",
+      "description": "How Snowflake changes ship and how the estate recovers: the official Terraform provider and its stable-versus-preview split, provider upgrades, plan review, CI/CD and environment promotion, drift and behaviour-change bundles, alongside replication and failover groups, Client Redirect, RPO/RTO tracked as requested/feasible/proven, dependency readiness and failback. Static review plus the approval-gated failover promotion guard, which is never auto-dispatched.",
+      "agents": [
+        "snowflake-maestro-agent",
+        "snowflake-devops-iac-release-agent",
+        "snowflake-bcdr-resilience-agent",
+        "snowflake-platform-administrator-agent",
+        "snowflake-live-failover-promotion-guard-agent"
+      ],
+      "skills": [
+        "snowflake-maestro",
+        "snowflake-devops-iac-release",
+        "snowflake-bcdr-resilience",
+        "snowflake-platform-administrator",
+        "snowflake-live-failover-promotion-guard"
+      ]
+    },
+    "snowflake-data-product-manager": {
+      "label": "Snowflake Data Product Manager",
+      "description": "Snowflake engineering as a sellable, supportable product: Native App architecture, application roles and requested privileges, the provider/consumer trust boundary, security-review readiness, listing and publication requirements, pricing and monetization architecture, version and patch lifecycle, supportability economics, and whether the initiative removes a business constraint anyone owns. Static review only.",
+      "agents": [
+        "snowflake-maestro-agent",
+        "snowflake-native-app-marketplace-product-agent",
+        "snowflake-business-value-adoption-strategist-agent",
+        "snowflake-analytics-semantic-data-product-agent",
+        "snowflake-governance-privacy-agent"
+      ],
+      "skills": [
+        "snowflake-maestro",
+        "snowflake-native-app-marketplace-product",
+        "snowflake-business-value-adoption-strategist",
+        "snowflake-analytics-semantic-data-product",
+        "snowflake-governance-privacy"
+      ]
     }
   }
 }